Tools Crypto Exploit Tracker exploit-0032
Exploit record
Raydium
- Loss
- $1M
- Attack vector
- Smart Contract Bug
- Chain
- Solana
- Sector
- DEX
What happened
On 10 June 2026 an attacker drained about $1.34 million from five deprecated Raydium legacy AMM V3 pools on Solana using forged LP tokens.
The legacy AMM V3 program, phased out in 2021 but never immobilised, did not validate the LP mint address, so a fake LP mint let the attacker withdraw real pool assets: roughly 893,700 USDC, 5,603 SOL and 150,177 RAY. The funds were bridged to Ethereum and routed through KuCoin and FixedFloat into Tornado Cash; Raydium said no current users were affected and pledged full repayment from its treasury.
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026